Check the vendor's advisory for affected versions, fixes and mitigation instructions. Catalogue inclusion confirms known exploitation; it does not establish whether your deployment is affected.
Latest VMware security news
Matched by vendor and product keywords. Publication dates are shown below. Sources: BleepingComputer, The Hacker News, SecurityWeek, Dark Reading, The Record, Security Affairs, CISA.
No matching headlines are present in the current feeds. This does not mean there are no recent security developments. Check the official vendor guidance above.
VMware vulnerabilities with known exploitation
Matched against CISA's vendor field and ordered by date added to its catalogue, rather than disclosure date. Showing up to 20 of 29 matching catalogue entries.
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful exploitation allows an attacker with administrative privileges to a virtual machine to leak memory from the vmx process.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.
Added to CISA:
CISA recommended action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.
Added to CISA:
CISA recommended action: Apply updates per vendor instructions.
News is matched using these vendor and product terms: VMware, ESXi, vCenter, vSphere, VMware Workstation. Vulnerabilities are matched to the VMware vendor field in CISA's catalogue. Keyword matching can miss related stories or include an incidental mention.
Feed snapshots refresh on a 15-minute cache interval; source outages can delay updates. Headlines and excerpts belong to their original publishers. Official advisory content is linked rather than reproduced.
Get new headlines matching your chosen technologies and topics. We check daily from 08:00 UTC and send a digest only when there are new matches. Digests may be delayed or skipped if our free-plan sending limit is reached.
Confirm your address using the email we send. We will not send digests before confirmation. Every digest includes an unsubscribe link. Instant alerts are not available.